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Abstract 

Turing machines define polynomial time (PTime) on strings but cannot deal 
with structures like graphs directly, and there is no known, easily computable 
string encoding of isomorphism classes of structures. Is there a computation 
model whose machines do not distinguish between isomorphic structures and 
compute exactly PTime properties? This question can be recast as follows: 
Does there exists a logic that captures polynomial time (without presuming 
the presence of a linear order)? Earlier, one of us conjectured the negative 
answer; see [74]. The problem motivated a quest for stronger and stronger 
PTime logics. All these logics avoid arbitrary choice. Here we attempt to 
capture the choiceless fragment of PTime. Our computation model is a version 
of abstract state machines (formerly called evolving algebras). The idea is to 
replace arbitrary choice with parallel execution. The resulting logic is more 
expressive than other PTime logics in the literature. A more difficult theorem 
shows that the logic does not capture all PTime. 

1 Introduction 

The standard computation model is Turing machines, whose inputs are strings. How- 
ever, in combinatorics, database theory, etc., inputs are naturally structures (graphs, 
databases, etc.) indistinguishable up to isomorphism. In such cases, there is a prob- 
lem with string presentation of input objects: there is no known, easily computable 
string encoding of isomorphism classes of structures. This calls for a computation 
model that deals with structures directly rather than via string encoding. There is a 
several such computation models in the literature, in particular relational machines 
[Abiteboul and Vianu 1991] and abstract state machines (formerly called evolving 
algebras) [Gurevich 1995]. 

The natural question is whether there is a computation model that captures PTime 
over structures (rather than strings). In different terms, essentially the same question 
has been raised in [Chandra and Harel 1982]. Gurevich translated Chandra-Harel's 
question as a question of existence of a logic that captures PTime and conjectured 
that no such logic exists [Gurevich 1988]. We address this issue in Section 3; here it 
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suffices to say that the notion of logic is a very broad one and includes computation 
models. 

If one seriously entertains the possibility that there is no logic that captures 
PTime, the question arises how much of PTime can be captured by a logic. Here 
we define a natural fragment of PTime and capture it by means of a version of ab- 
stract state machines (ASMs). We call the fragment Choiceless Polynomial Time 
(CPTime). The idea is to eliminate arbitrary choice by means of parallel execution. 
Consider for example the Graph Reachability problem: 

Instance: A graph G = (V } E) with distinguished nodes s and t (an allusion to 
Source and Target respectively). 

Question: Does there exists a path from s to t in G1 

A common reachability algorithm constructs the set X of all vertices reachable from 
s and then checks if X contains t. To construct X } an auxiliary "border-set" Y C X 
is used. 

if Mode = Initial then 

X, Y:={s}, Mode := Construct 
endif 



if Mode = Construct then 
if Y ^ then 
choose y £ Y 

let Z = {z £ V - X : yEz} 
do in parallel 
X :=XUZ 
Y:=(Y-{y})UZ 
enddo 
endlet 
endchoose 
else Mode := Examine 
endif 
endif 



if Mode = Examine then 

If t £ X then Output := Yes else Output := No endif 

Mode := Final 
endif 
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If a given graph G comes with an order on vertices, the order can be used to elim- 
inate choice, but we are interested in structures which are not necessarily ordered. In 
the case of the reachability problem, choice can be eliminated by means of parallelism. 
Here is a revised version of the second transition rule. 

if Mode = Construct then 
if Y ^ then 

let Z = {z e V - X : (3y G Y) yEz} 
X := X U Z 
Y := Z 
else Mode := Examine 
endif 
endif 

Of course, one is not always so lucky. In Section 10, we describe a well-known 
PTime algorithm for the Perfect Matching problem. The algorithm uses choice and, 
as far as we know, there is no choiceless PTime algorithm for Perfect Matching. 

Our computation model is explained in Section 4 and our formalization C of 
Choiceless PTime is given in Section 5. £ is a computation model, but it can be 
viewed as a (very generalized) logic. In Section 7, we show that this logic is more 
expressive than Abiteboul-Vianu's logic (whose "formulas" are relational machines). 
In Section 10, we show that C does not express the parity of a naked set or the perfect 
matchability of a bipartite graph. 

One shortcoming of C is that it is naturally three- valued: some input structures 
are accepted, some are rejected, and some may be neither accepted nor rejected by 
a given machine. In Section 11, we augment our computation model with explicit 
knowledge of the cardinality of (the base set of) the input structure. The augmented 
logic £ is two-valued. Parity is easily expressible in £ but perfect matchability is 
not expressible. 

The logic C can be easily extended with a counting function (see Section 4) and 
maybe it should. This would be a natural way to continue this investigation. Let 
us notice though that, unless there is a logic that captures PTime, there is no end 
to possible extensions of £ Any PTime decidable problem can be converted to a 
quantifier and added to £ 

Finally, there are some open problems that we leave. We conjecture that CPTime 
enjoys some sort of zero-one or convergence law. We conjecture that the extension 
CPTime + Count of CPTime with the counting function is a proper fragment of 
PTime. Further, it is not difficult to concoct an artificial complete problem for 
CPTime, but it would be interesting to see a natural one. 



3 



2 Preliminaries 



We recall various definitions and establish some terminology and notation. In this 
paper, vocabularies are finite. 

2.1 Global Relations 

We start with a convenient notion of global relation [Gurevich 1988]. 
A £;-ary global relation of vocabulary T is a function p such that 

• the domain Dom(/?) consists of T-structures and is closed under isomorphism, 

• p associates a A;-ary relation pa with every structure A £ Dom(/?), and 

• p is abstract in the following sense: every isomorphism from a structure A £ 
Dom(jo) onto a structure B is also an isomorphism from the structure (A,pa) 
onto the structure (B,pb)- 

Typically the domain of a global relation of vocabulary T is the class of all T- 
structures or the class of all finite T-structures. For example, every first-order formula 
<p(vi, . . . , Vk) of vocabulary T with free variables as shown, denotes a A;-ary global 
relation p(vi, . . . , Vk) on all T-structures. 

2.2 The Least Fixed Point Logic FO+LFP 

The least fixed point logic has been around for a long time [Moschovakis 1974]. It 
is especially popular in finite model theory [Ebbinghaus and Flum 1995]. The latter 
book contains all the facts that we need. For the reader's convenience (and to establish 
notation), we recall a few things. 

Syntax FO+LFP is obtained from first-order logic by means of the following addi- 
tional formula-formation rule: 

• Suppose that <p(P, v) is a formula with a A;-ary predicate variable P and a &-tuple 
v of free individual variables. Further suppose that P occurs only positively in 
(f. If i be a &-tuple of terms, then 

[LFP Pfi (<p(P,v)j\(i) 

is a formula. 
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The vocabulary and the free variables of the new formula ip are defined in the obvious 
way. In particular, P is not in the vocabulary of ip. Suppose that a predicate Q 
belongs to the vocabulary of ip; then Q occurs only positively in ip if and only if it 
occurs only positively in (p. 

Semantics The formula (f(P } v) } may have free individual variables u in addition 
to v. Let 10 be a &-tuple of fresh individual variables, and let T be the vocabulary of 
the formula 

4>(u,w) = [LFP Pfi (<p(P,u,v)j\(w) 

The meaning of ip is a global relation p(u } w) whose domain consists of all T-structures 
(unless we restrict the domain explicitly, for example to finite T-structures). 

Given an T-structure A with fixed values a of parameters u, consider the following 
operator on A;-ary relations over BaseSet(A): 

0(P) = {v:<p(P,d,v)}. 

Since (f is positive in P, 6 is monotone in P. The A;-ary relation Pa(o, } w) is the least 
fixed point of 6. To obtain the least fixed point, generate the sequence 

c 0(0) c 2 (0) c ... 

of A;-ary relations over A. For a finite structure A, there exists a natural number / 
such that #'(0) = 0' +1 (0); in this case the least fixed point is 8 (0). The case of infinite 
A is similar except that / may be an infinite ordinal. 

Simultaneous Induction Let T be a vocabulary and consider FO+LFP formulas 
<p(P,Q,u) and ip(P } Q } v) of vocabulary T U {P, Q} which are positive in P and Q. 
Here Arity(P) = Length(u) and Arity(Q) = Length(u). There may be additional free 
individual variables which we consider as paramenters. 

Given an T-structure A with fixed parameters, consider the monotone operator 

0(P, Q)=(PU{u: <p(P, Q, u)}, QU{v: ^(P, Q, v)}) 
and let (P*, Q*) be the least fixed point of 6. 

Proposition 1 The global relations P* and Q* are expressible by FO+LFP formulas. 
Moreover, the result generalizes to simultaneous induction over any finite number of 
predicate variables. 
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2.3 The Finite Variable Infinitary Logic 



Again, the book [Ebbinghaus and Flum 1995] contains all the information that we 
need, but we recall a few things for the reader's convenience. 

Syntax As in a popular version of first-order logic, w formulas are built from 
atomic formulas by means of negations, conjunctions, disjunctions, the existential 
quantifier and the universal quantifier. The only difference is that w allows one 
to form the conjunction and the disjunction of an arbitrary set S of formulas pro- 
vided that the total number of variables in all S'-formulas is finite. Here we have an 
additional constraint: the vocabulary of every formula is finite. For every natural 
number m, w is the fragment of w where formulas use at most m individual 
variables. 

Semantics Every A;-ary w formula of vocabulary T denotes a A;-ary global rela- 
tion of vocabulary T in the obvious way. 

An important fact is that every global relation expressible in FO+LFP is express- 
ible in w [Ebbinghaus and Flum 1995, Theorem 7.4.2]. 

Pebble Games There is a pebble game G m (A } B) appropriate to tjJ . Here A and 
B are structures of the same purely relational vocabulary. For explanatory purposes, 
we pretend that that A is located on the left and B is located on the right, but in 
fact A and B may be the same structure. 

The game is played by Spoiler and Duplicator. For each i = 1, . . . , k, there are two 
pebbles marked by i: the left z-pebble and the right z-pebble. Initially all the pebbles 
are off the board. After any number of rounds, for every i } either both z-pebbles are 
off the board or else the left z-pebble covers an element of A and the right z-pebble 
covers an element of B. In the obvious way, the pebbles on the board define a relation 
R between A to B. A round of G k (A, B) is played as follows. 

If R is not a partial isomorphism, then the game is over; Spoiler has won and 
Duplicator has lost. Otherwise Spoiler chooses a number i; if the z-pebbles are on 
the board, they are taken off the board. Then Spoiler chooses left or right and puts 
that z-pebble on an element of the corresponding structure. Duplicator puts the other 
z-pebble on an element of the other structure. 

Duplicator wins a play of the game if the number of rounds in the play is infinite. 

Proposition 2 If Duplicator has a winning strategy in G m (A } B), then no w sen- 
tence distinguishes between A and B. Therefore, for every FO+LFP sentence <p, 
there exists m such that, for any A and B , if Duplicator has a winning strategy in 
G m (A } B) then <p does not distinguish A from B . 
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2.4 Set Theory 



Let A be a structure. In the literature, notation \A\ is used in two ways: to denote 
the base set of A and to denote the cardinality of BaseSet(A). We will employ notation 
\A\ only in the sense of cardinality; we will also use an alternative notation Card(A) 
for the cardinality of A. 

As usual in set theory, we identify a natural number (that is a non-negative integer) 
i with the set of smaller natural numbers {j : j < i}; this set is called the von 
Neumann ordinal for i. The first infinite ordinal is denoted u. 

We consider sets built from atoms (or urelements). The term object will mean an 
atom or a set. A set X is transitive if y £ x £ X implies y £ X. If X is an object, 
then TC(X) is the least transitive set Y with X £ Y . An object X is hereditarily 
finite if TC(X) is finite. 

P is the powerset operation; if X is set then ~P(X) is the collection of all subsets 
of X. If X is a finite set of atoms, then 

HF(X) := \J{P % {X) ■i<oj} = XU P(X) U P(P(X)) U . . . 

Alternatively, HF(X) can be defined as the smallest set Y such that X C Y and 
every finite subset of Y is a member of Y. 

Every set has an ordinal rank. If x is an atom or the empty set, then the rank of 
x equals 0; and if x is a nonempty set, then the rank of x equals 1 plus the maximum 
of the ranks of the elements of x. 

3 PTime and PTime Logics 

In this section, structures are finite and global relations are restricted to finite struc- 
tures. 

By definition, the PTime complexity class consists of languages, that is sets of 
(without loss of generality, binary) strings. A language X is PTime if there exists 
a PTime Turing machine (that is polynomial time bounded Turing machine) that 
accepts exactly the strings in X. This definition is easily generalized to ordered 
structures by means of a standard encoding; see for example [Ebbinghaus and Flum 
1995] or [Gurevich 1988]. We will say that a Turing machine accepts an ordered 
structure A if it accepts the standard encoding of A. 

The generalization to arbitrary (that is not necessarily ordered) structures is less 
obvious. One does not want to distinguish between isomorphic structures and there 
is no obvious, easily computable string encoding of isomorphism classes of structures. 

The problem was first addressed by Chandra and Harel in the context of database 
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theory [Chandra and Harel 1982]. We describe their approach. A database is defined 
as a purely relational structure whose elements come from some fixed countable set, 
without loss of generality the set of natural numbers. A query is a global relation over 
databases; recall that global relations respect isomorphisms. A query Q is PTime if 
the set 

{(B,x) : x G Q(B)} 

is PTime. Thus each PTime query Q is given by a PTime Turing machine M that 
accepts a string s if and only if s is the standard encoding of some (_£?, x) with 
x G Q(B); call M a PTime witness for Q. Let W be the collection of all PTime 
witnesses for all queries. It is easy to check that W is not recursive. Chandra and 
Harel posed the following question. Does there exists a recursive set S C W such 
that every PTime query has a PTime witness in 57 

Gurevich translated their question as a question of the existence of a logic that 
captures PTime [Gurevich 1988]. He conjectured that the answer is negative; in this 
connection his definition of a logic is very broad. If desired, some obvious requirements 
can be imposed; see [Ebbinghaus 1985] in this connection. Here we recall Gurevich's 
definitions and slightly generalize them in order to define three- valued logics. 

PTime Global Relations What does it mean that a global relation is PTime? 
The question easily reduces to the case of miliary global relations. Indeed, let p 
be a A;-ary global relation of some vocabulary T and let ci,...,Cfc be the first k 
individual constants outside of T. Define the miliary relation a of vocabulary T + = 
T U {ci, . . . , c/;} as follows. If A is an T-structure, and ai, . . . , are elements of A, 
and B is the T + -expansion of A where ai, . . . , interpret ci, . . . , then erg -<=>■ 
Pa{cl\i ■ ■ ■ i a k)- Declare p PTime if a is so. 

A miliary global relation p of vocabulary T can be identified with the class of 
T-structures A such that pa is true. It remains to define what does it mean that a 
class K of structures of some vocabulary T is PTime. Let < be a binary predicate 
not in T. An ordered version of an T-structure A is a structure B of vocabulary 
T U {<} such that the T-reduct of B is isomorphic to A and the interpretation of < 
is a linear order. 

Define a class of K of T-structures to be PTime if it is closed under isomorphisms 
and there exists a PTime Turing machine M (a PTime witness for K) which accepts 
a binary string s if and only if s is the standard encoding of an ordered version of 
some structure in K. 

Logics For simplicity, we define logics whose formulas denote miliary global rela- 
tions. The trick above allows one to extend such a logic so that its formulas denote 
arbitrary global relations. 
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A logic L is given by a pair of functions (Sen, Sat) satisfying the following condi- 
tions. Sen associates with every vocabulary T a recursive set Sen(T) whose elements 
are called L-sentences of vocabulary T. Sat associates with every vocabulary T a 
recursive relation Satf(A } p) where A is an T-structure and p an L-sentence of vo- 
cabulary T. We say that A satisfies p (symbolically A |= p) if Satf(A } p) holds. It 
is assumed that Satf(A } p) -<=>■ Satf(B } p) if A and B are isomorphic. 

If p is a sentence of vocabulary T, let Mod(p) be the collection of T-structures A 
satisfying p. 

PTime Logics Let L be a logic. For each T and each p £ Sen(T), let K(T } p) be 
the class of T-structures A such that A |= p. Call L PTime, if every class K(Y, p) is 
PTime. 

Logic that Capture Ptime A logic L captures PTime if it is PTime and, for every 
vocabulary T, every PTime class of T-structures coincides with some K(T } p). 

Remark It may seem odd that the definition of logic does not require any uniformity 
in T, but uniformity is not necessary. It is not hard to show that, if there is a logic 
of graphs (rather than arbitrary structures) that captures PTime on graphs, then 
there is a logic that captures PTime on arbitrary structures and that possesses some 
uniformity with respect to T. [Gurevich 1988]. □ 

Three- Valued Logics In the cases when a logic is really a computation model and 
sentences are computing machines, A satisfies p means that p accepts A. That calls 
for the following natural generalization. Call logics defined above two-valued. 

A three-valued logic L is like a two- valued logic except that Satf(A } p) has three 
possible values telling us whether p accepts A, or p rejects A, or neither. It is assumed 
that Satf(A } (f) = Satf(B } p) if A and B are isomorphic. 

Each L-sentence p of vocabulary T gives rise to two disjoint classes of T-structures. 
The class Mod + ((,c) of T-structures accepted by p and the class M.od~ (p) of classes 
rejected by p. Call L PTime if, for every p, the classes Mod + ((,c) and Mod~((,c) are 
PTime. 

Two disjoint classes A"i, K 2 of structures of some vocabulary T are L-separable if 
there exists an L-sentence p such that K\ C Mod + ((,c) and K 2 C Mod - (p). We will 
see that this is a more robust notion than the similar notion where C is replaced with 
equality. 

Abiteboul-Vianu Relational Machines Finally, for future reference, we recall 
(a version of) Abiteboul-Vianu's Relational machines [Abiteboul and Vianu 1991; 
Abiteboul-Vardi-Vianu 1997]. 
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A relational machine is a Turing machine augmented with a relational store which 
is a structure of a fixed purely relational vocabulary T. A part T of the vocabulary 
is devoted to input relations. The Turing tape is initially empty. As usual, the 
program consists of "if condition then action" instructions. Here is an example of an 
instruction. 

If the control state is s 3 , and the head reads symbol 1, and the relation 
Ri is empty, then change the state to s 4 , replace 1 by 0, move the head 
to the right and replace R 2 with R 2 R3. 

In general, instructions are Turing instructions except that (1) the condition may 
be augmented with the emptyness test of one of the relations, and (2) the action may 
be augmented with an algebraic operation on the relations. The algebraic operations 
are of the following four types. It is assumed that the arities of the operations involved 
are appropriate; in the example above, the relations R 2 and R 3 are all of the same 
arity. 

• Boolean operations. 

• Projections 7Ti 1 ...i m Rk- Project R^ on the coordinates i\ } . . . } i m in the specified 
order. 

• Cartesian product of two relations. 

• Selections Oi =] Rk- Select the tuples in Rk whose z-th component coincides with 
the j-th component. 

A PTime relational machine M can be defined as a relational machine together 
with a polynomial p(n) bounding the number of computation steps on input structure 
of size n. The notion of PTime relational machine gives rise to a PTime logic (whcih 
may be called AV Logic) where the sentences of vocabulary T are PTime relational 
machines with input vocabulary T . 

In our view, AV Logic is naturally three- valued. Given an input structure / of 
size n, a PTime relational machine (M } p(n)) may accept / within time p(n) } may 
reject / within time p(n) } or do neither. One cannot modify M so that it computes 
p(n) because n is unknown to the machine. Of course one can clump together all 
non- accepted structures but this definition is too sensitive to the choice of p(n). 

4 Computation Model 

Our computing devices are abstract state machines (ASMs, formerly called evolving 
algebras) [Gurevich 1995, Gurevich 1997] adapted for our purposes here. 
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4.1 Vocabularies 



An ASM vocabulary is a finite collection of function names, each of a fixed arity. Some 
function names may be marked as relational or static, or both. Relational names are 
also called predicates. A function name is dynamic if it is not marked static. The 
Greek letter T is reserved to denote vocabularies. 

In our case, every vocabulary consists of the following four parts: 

Logic names The equality sign, miliary function names true , false and the names of 
the usual Boolean operations. All logic names are relational and static. (The 
standard ASM definition [Gurevich 1995] requires another logic name, undef , 
but we will not employ undef here, using instead as a default value.) 

Set-theoretic names The static binary predicate £ and the following static non- 
predicate function names. 

• Nullary names and Atoms. 

• Unary names (J and TheUnique. 

• A binary name Pair. 

Input names A finite collection of static names. For simplicity of exposition, we 
assume that all input names are relational. 

Dynamic names A finite collection of dynamic function names including nullary 
predicates Halt and Output. 

4.2 States 

A state A of vocabulary T is a structure A of vocabulary T satisfying a number of 
conditions described in this subsection. 

Base Set The base set of A consists of two disjoint parts: 

1. A finite set X of atoms, that is elements that are not sets. 

2. The collection of all hereditarily finite sets built from the atoms. 

The atoms and the sets are objects of A. The objects form a transitive set HF(X) 
which can be defined as the closure of X under the following operation: If n is a 
natural number and then throw {xi, . . . , x n } in. We have also: 

HF(X) = (J PowerSer(X). 

n<Cio 
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Set-Theoretic Functions The interpretations of £ and are obvious. Atoms is the 
set of atoms. If a is an atom or a logic element, then (J a = 0. If ai, . . . , aj are atoms 
and &i, . . . , bk are sets then U{ a i? • • • , Oj, &i, • • • , bk} = W U • • • U bk- If a is a singleton 
set, then TheUnique(a) is the unique element of a; otherwise TheUnique(a) = 0. 
(If x is a set then x = TheUnique{x} = Ui^}? so TheUnique is redundant in this 
situation, but it is needed if x is an atom.) Pair(a,6) = {a, b}. 

Logic Names false and true are interpreted as and 1 respectively. Recall that 
is and that 1 is Pair(0,0) = {0}. The Boolean connectives are interpreted in the 
obvious way over the Boolean values 0, 1 and take the value if at least one of the 
arguments is not Boolean. 

Predicates Predicates are interpreted as functions whose only possible values are 
the Boolean values 0,1. If P(d) evaluates to 1 (respectively 0), we say that P(a) holds 
or is true (respectively, fails or is false). The input predicates "live" over the atoms: 
if P is an input predicate and P(ai, . . . , af) holds, then every a 4 - is an atom. 

Dynamic Functions Define the extent of a dynamic function / of arity j to be the 
set 

{(x , ...,xj): f(x , . . . , Zj-i) = xj ^ 0}. 

The only restriction on the interpretation of a dynamic function / is that its extent 
is finite. 

4.3 Input Structures 

Consider an ASM vocabulary T. An input structure appropriate for T-programs is 
any finite structure / of the input vocabulary. A little problem arises in the case 
when some elements of / are sets. The actual input corresponding to / is a structure 
isomorphic to / whose base set (the universe) consists of atoms. An T-state is initial if 
the extent of every dynamic function is empty. For any input structure / appropriate 
for T, there is a unique, up to isomorphism, initial T-state A where the atoms together 
with input relations form a structure isomorphic to /. 

Remark. We will be not very careful in distinguishing between an input structure 
/ and its atomic version. Without loss of generality, one may assume that the input 
structure itself consists of atoms. 
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4.4 Terms 

By induction, we define a syntactic category of terms and a subcategory of Boolean 
terms. 

• A variable is a term. 

• If / is a function name of arity j and ti, . . . , tj are terms, then /(ti, . . . , tj) is a 
term. If / is a predicate then /(ti, . . . , tj) is Boolean. 

• Suppose that v is a variable, t(y) is a term, r is a term without free occurrences 
of v, and g{y) is a Boolean term. Then 

\t(y) : v G v : g(v)} 

is a term. 

In the usual way, the same induction is used to defined free variables of a given 
term. In particular, the free variables of {t(v) : v G r : g(v)} are those of t(v),r and 
g{y) except for v. 

Semantics is obvious. In particular, the value of \t(y) : v G r : g(v)} at a given 
state A is the set of values Val^(t(u)) such that, in A, v G r and g{y) holds. 

4.5 Syntax of Rules 

Transition rules are defined inductively. 
Skip Skip is a rule. 

Update Rules Suppose that / is a dynamic function name of some arity r and 
t , . . . ,t r are terms. If / is relational, we require that t is Boolean. Then 

f(ti, . . . , t r ) := t 

is a rule. 

Conditional Rules If g is a Boolean term and R 2 are rules, then 
if g then Ri else R 2 endif 
is a rule. 
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Do-forall Rules If v is a variable, r is a term without v free, and Ro(v) is a rule, 
then 

do f orall v £ r 

Ro{v) 
enddo 

is a rule with head variable v } guard r and body Ro- The definition of free and bound 
variables is obvious. 

Abbreviate rule 

do f orall v £ {0, 1} 

if v = then R 

else Ri endif 
enddo 



Here and in the following, we use standard notation as a more readable substitute 
for the official syntax. In particular, means 0, {x } y} means Pair(x,y), {x} means 
Pair(x,x), and 1 means {0}. 

4.6 Semantics of Rules 

If ( is a variable assignment over a state A, assigning values to finitely many variables, 
then the pair B = (A, £) is an expanded state, A = State(_B), ( = Assign(_B), and 
Dom(C) = Var(_B). Further, let v be a variable and a an element of A. Then B(y \— > a) 
is the expanded state obtained from B by assigning or reassigning o to u. In other 
words, B(y \— y a) = (A, (') where Dom((') = Dom(£)U{u}, C'( v ) = a an d C'( u ) = C( u ) 
for the remaining variables. 

A location of an expanded state A is a pair I = (/, a) where / is a dynamic function 
and a is a tuple of elements of A such that the length of a equals the arity of /. If b 
is also an element of A, then the pair a = (£, b) is an update of A. ((/, (ai, . . . , a?)), b) 
is abbreviated to (/, ai, . . . , a 17 b). To fire a at A, put b into the location /, that is, 
redefine A so that f(a) = b. The other locations remain intact. The resulting state is 
the sequel of A with respect to a. Two updates clash if they have the same locations 
but different new contents. 

An action over a state A is a set of updates of A. An action is consistent if 
it contains no clashing updates. To perform an action /3, do the following. If (3 is 
consistent, then fire all updates a £ (3 simultaneously; otherwise do nothing. The 
result is the sequel of A with respect to (3. If (3 is inconsistent then the sequel of A is 
A itself. 



do- in-parallel 

to Rq } R\ 

enddo 
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A rule R and the expanded state A are appropriate lor each other il Voc(A) 
contains all lunction symbols in R and Var(A) contains all free variables in R. 

Now we are ready to explain the semantics of rules. The denotation Den(i?) of a 
rule R is a function on expanded states A appropriate for R. Each Den(i?)(A) (or 
Den(i?, A) for brevity) is an action. To fire R at A, perform the action Den(i?, A) 
at State(A). The sequel of A with respect to R is the sequel of A with respect to 
Den(i?, A). Den(i?, A) is defined by induction on R. 

Skip Den(Skip,A) = 0. 

Update Rules If R is an update rule f(s) := t and I is location (/, Val^(s)), then 
Den(i?,A) = {(£, VaU (*))}. 



Conditional Rules If R is the rule if g then Ri else R 2 endif , then 
Den(i?, A) -- 



Den(i?i, A) if g holds at A; 
Den(i? 2 ,A) otherwise. 



Do-forall Rules If R i 



is 



do f orall v £ r , 

Ro(v) 
enddo 

then 

Den(i?, A) = \J{Ben(R (v), A(v ^ a)) : a £ VaU(r)} 

4.7 Programs 

A program is a rule without free variables. The vocabulary Voc(II) of a program 
II is the collection of function names that occur in II. States of II are states of the 
vocabulary Voc(II). 

Runs A run of II is a (finite or infinite) sequence (A; : i < n) of states of II such 
that 

• An is an initial state, 
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• every Ai + \ is a sequel ol A{ with respect to II, and 

• Halt fails at every A{ with i + 1 < k. 

Here k is a positive integer or the first infinite ordinal u. The length of a finite run 
(Ai : i < /} is /. The length of an infinite run is u. 

Let / be an input structure for n. The run of H on I is the run (A; : i < n) such 
that 

• A is the initial state generated by /, and 

• either k is infinite, or else k is finite and Halt holds at the final state 
The base set and objects of a run (Ai : i < n) are those of A . 

4.8 The Counting Function 

There are many ways to extend the computation model described above without 
introducing explicit choice in its full generality. One gentle extension of the compu- 
tation model described above is considered in Section 11. A more powerful extension 
is achieved by introducing the counting function which, given a set x of cardinality 
k, produces the von Neumann ordinal for k. 

Remark. Since the computation model is expandable by adding static functions for 
counting or perfect matching, etc., one gets in fact a notion of relative computability. 

5 Choiceless PTime 

It is easy to check that every computable global relation on finite structures is com- 
putable by an appropriate ASM program. But we are interested in polynomial time 
computations. 

5.1 The Definition of Choiceless PTime 

Critical, Active and Relevant Objects Let A be a state and x G BaseSet(A). 

• Object x is critical at A if x is an atom, or x G {0, 1}, or x is a value of a dynamic 
function, or x is a component of a location where some dynamic function takes 
a value different from 0. 

• Object x is active at A if x G TC(y) for some critical y. 
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Further, let p be a run ol a program II. An object x ol p is active in p il it is so at 
some state ol p. 

PTime Programs One may define a notion ol honest computation time. Don't just 
count computation steps; charge lor example a unit ol time lor every lunction applica- 
tion, every update, etc. In other words, instead ol macrosteps, count the microsteps 
ol the computation [BG]. Here we use a simpler way to bound the computation time. 

A PTime (bounded) program II is a triple II = (II, p(n), q(n)) where II is a program 
and p(n) } q(n) are integer polynomials. The run ol II on an input structure / ol size 
n is the longest initial segment p ol the run ol II on / such that the length ol p is 
< p(n) and the number ol active objects in p is < q(n). A PTime program II accepts 
(respectively rejects) an input structure / il the run ol II on / halts and Output equals 
true (respectively false) in the final state. 

Choiceless Polynomial Time Notice the classes ol accepted and rejected input 
structures are disjoint but not necessarily complementary and that increasing the 
polynomial bound may increase these classes. II the size ol the input structure is 
known and il one uses a version ol honest computation time, a program may keep 
track ol the honest computation time and in this way insure that every computation 
is halting. We will consider this scenario in Section 11. 

Here, we define Choiceless Polynomial Time (in briel CPTime) as a collection 
ol pairs (Ki 7 K 2 ) where Ki 7 K 2 are disjoint classes ol finite structures ol the same 
vocabulary. A pair (Ki 7 K 2 ) is in CPTime (or CPTime separable) il there exists a 
PTime program that accepts all structures in K\ and rejects all structures in K 2 . The 
program may accept some structures not in K\ or reject some structures not in K 2 . 
Obviously, there is a three-valued logic that expresses exactly CPTime properties; 
use PTime programs as sentences. 

A class K ol finite structures ol the same vocabulary T is in CPTime, il the pair 
(K, K') is in CPTime where K' is the complement ol K in the class ol finite structures 
ol vocabulary T. 

Call two programs n and E PTime equivalent il 

• lor every PTime version II ol II, there exists a PTime version E ol E which ac- 
cepts all input structures accepted by II and rejects all input structures rejected 
by II, and 

• lor every PTime version E ol E, there exists a PTime version II ol II which ac- 
cepts all input structures accepted by E and rejects all input structures rejected 
by E. 
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5.2 Upper Bounds for CPTime 

In our definition of a PTime program, the given polynomials bound not only time 
but also space. We show that CPTime is not too broad. 

Theorem 1 Consider a PTime program H = (Yl } p(n) } q(n)). 

1. There is a P Time-bounded Turing machine that accepts exactly those strings 
that encode ordered versions of input structures accepted by H and rejects exactly 
those strings that encode ordered versions of input structures rejected by II. 

2. There exists a polynomial r(n) such that the number of microsteps in every run 
of II on an input structure of size n is bounded by r(n). 

Proof 1. The desired Turing machine simulates the given PTime program. The 
bound r in a term {s(v) : v £ r : g(v)} and in a do-forall rule ensures that the 
number of immediate subcomputations is bounded by the number of active elements 
and thus by q(n). This yields a polynomial bound on the work needed to simulate 
one transition in the run. since the number of transitions is bounded by p(n), the 
whole simulation takes only polynomial time. 

2. Since the number of macrosteps is bounded by a polynomial, it suffices to check 
that the number of microsteps needed to fire an arbitrary rule R is bounded by a 
polynomial. This is done by an obvious induction on R. □ 

The part 1 of the theorem gives the following corollary. 

Corollary 1 Every CPTime pair of structure classes (Ki 7 K 2 ) is separated by a 
PTime class. 

5.3 A Lower Bound for CP 

In the previous subsection, we have shown that our definition of CP is not too broad. 
One may also worry that it is too narrow, that — because of the use of transitive 
closure in the definition of active objects — it is possible to create a large number 
of active objects in short time. Some active objects, namely atoms and 0,1, exist 
already in the initial state. The problem is to show that only polynomially many 
active nonempty sets can be created within polynomial honest computation time. 
We show that, under the definition of honest computation time hinted at above, the 
number of objects activated (that is the number of active objects which are inactive in 
the initial state) in any run of a PTime program is bounded by the honest computation 
time. The details of the definition of honest computation time are not important. 
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Consider a PTime program II. Without loss ol generality, we may assume that II 
does not reuse variables, that is no variable is bound more than once. It follows that, 
in every subrule of II, no variable is bound more than once and no variable occurs 
both free and bound. Define a grounded term to be a pair (t, A) where t is a term 
and A is an expanded state appropriate for t. Similarly, define a grounded rule to 
be a pair consisting of a rule and expanded state appropriate for it. Notice that a 
grounded term (t, A) h value, namely Val^(t). 

The following definitions are intended to describe, for each grounded term or rule, 
say (X, A), a partially ordered set (poset) Pre(X, A) whose nodes are labeled with 
grounded terms that one would naturally evaluate in the course of evaluating X at A; 
the order of Pre(X, A) reflects the order in which one would evaluate the grounded 
terms. Pre(X, A) is similar to the parse tree of X } but there are some distinctions. To 
prevent the definitions from getting even longer that they are, we omit the grounded 
terms involved in evaluating guards; one could include them without any damage to 
our argument. Also, we omit subrules that end up not being used because of clashes. 

In fact, Pre(X, A) is not necessarily a tree. It will be convenient for our purposes 
that, for each free variable of X } there is at most one node with a label of the form 
(x,A) or (x } A(v i — y a)); this gives rise to the following auxiliary definition. Let P 
be a poset whose nodes are labeled with ground terms, and let F be a collection of 
variables such that no label in P has the form (x } A(x \— > a)) and each node with a 
label of the form (x,A) or (x } A(v \— > a)) is minimal in P. Then adjusting P with 
respect to F means merging, for each x £ F, all nodes of P with labels of the form 
(x,A) or (x } A(v i — y a)) into one node labeled with (x,A). 

Define a disjoint union of labeled posets in the obvious way: order and the labels 
within each piece are preserved and elements of distinct pieces are incomparable. Now 
we are ready define posets Pre(X, A) by induction on X. 

Definition 1 Pre(t, A) is defined by recursion on t. 

• If t is a variable x, then Pre(t, A) is a singleton poset whose only node is labeled 
with (x, A). 

• If t is f(ti } . . . , tj), then Pre(t,A) is obtained from the disjoint union of 
Pre(ti, A), . . . , Pre(tj, A) by adding a (t, A)-labeled node at the top and ad- 
justing the result with respect to the free variables of t. 

• If t is {s(v) : v £ r : g(v)} } then Pre(t, A) is obtained from the disjoint union of 
labeled posets Pre(s(u), A(y i— > a)), for all a £ Val^(r) such that Val^((/(a)) = 
true, by doing the following. (1) Adjoin a (t, A)-labeled node at the top. (2) 
Adjoin a copy of Pre(r, A) below all (y,A(y i— > a))-labeled nodes. (3) Adjust 
the result with respect to the free variables of t. 

□ 
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Note that Pre(t, A) always has the top node labeled with (t, A). Further, for each 
free variable x of t, there is at most one node labeled with (x,A) and this node (if 
present at all) is minimal in Pre(t, A). 

Definition 2 Pre(i?, A) is defined by recursion on R. 

• If R is Skip, then Pre(i?, A) = 0. 

• If R is /(ti, . . . , tj) := t , then construct Pre(i?, A) as follows. Form the disjoint 
union of Pre(t , A), . . . , Pre(tj, A) and adjust the result with respect to the free 
variables of R. 

• If R is "if g then R 1 else R 2 endif" then Pre(i?, A) is Pre(i?i, A) or Pre(i? 2 , A) 
according to whether Val^((/) is true or false. 

• If R is "do forall v £ r, Ro(v) enddo", then construct Pre(i?, A) as follows. 
Form the disjoint union of Pie(R (v) } A(v \— > a)) for all a £ Val^(r). Add a 
copy of Pre(r, A) below each (y,A(y i— > a)) if there any; otherwise add a copy 
of Pre(r, A) to the disjoint union. Adjust the result with respect to the set of 
free variables of R. 

□ 

If (X } A) is a grounded term or rule, let Val[Pre(X, A)] be the collection of objects 
Vals(s) such that (s, B) is a label in Pre(X). 

Lemma 1 1. IfDen(R } A) contains an update (/, (a , . . . , Oj-i), cij), then every 
a, £ Val[Pre(R,A)}. 

2. Suppose that (X } A) is a grounded term or rule with bound variable v. If(v,B) 
is a label in Pre(X } A), then B has the form C{y i— > a) where C = A(u i— > b) 
and the variables u (if present at all) are all different from v. 

Proof 

1. Induction on R. 

2. Induction on X. □ 

The labels of Pre(X, A) are (some of the) grounded terms that would be evaluated 
when one evaluates X in A. At least one unit of honest computation time should be 
spent to evaluate each of the labels. So if a run (A , . . . , Ai) of the program II takes 
honest computation time T, then 

Card(lJVal[Pre(n, A,-)]) < T. 
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Theorem 2 Consider a run p = (A ,...,A/) of H. Every object x activated in p 
belongs to \J Val[Pre(Tl } A t )] . 

i 

Proof Call sets 0, 1 binary and let x be an active nonbinary set in p. In view of 
the convention about dynamic functions in initial states, A has no critical nonbinary 
sets and thus no active nonbinary sets. Let i be the first index such that x is active 
in Ai + \. So there is a nonbinary set y, critical for with x £ TC(y). Since y is 

not critical for A;, there must be an update, executed in the step from A{ to 
involving y as either the new value or a component of the location. By Lemma 1, y £ 
Val[Pre(II, Among all nodes n in Pre(il,A 8 ) such that x £ TC(Val(Label(n))), 

choose a minimal one. Call this node n and let (t,B) = Label(n ). Our goal is to 
show that VaLg(t) = x. So suppose this fails. Then there exists w £ VaLg(t) such 
that x £ TC(w). (This includes the possibility that x = w.) As x is a nonbinary 
set, w is a nonbinary set. We consider the various possibilities for t and deduce a 
contradiction in every case. Note that B is an expansion of A{. 

Suppose that t has the form f(s) for a dynamic /. Then VaLg(t) is critical already 
in Ai and therefore x is active in A;, contrary to our choice of i. 

Suppose that t is or Atoms. This is absurd, as Valg(t) contains a nonbinary set 

w. 

Suppose that t is [js. Since w £ Valg(t) = UVaLg(,s), we have w £ u £ VaLg(,s) 
for some u. Since x £ TC(u;), we have x £ TC(VaLg(,s)). But Pre(t, B) has a node 
labeled (s,B) and thus there is a node labeled (s,B) below n in Pre(LI,A). This 
contradicts the choice of n . 

Suppose t is {si,s 2 }- Then x £ TC(u;) = TC(VaLg(,s)) for some s £ {si,s 2 }- The 
rest is as in the [j case. 

Suppose that t is TheUnique(s). Since Vale(t) is a set (not an atom), 
TheUnique(s) = \J(s) here, and we get a contradiction as in the [j case. 

Suppose that t is P(s) where P is a predicate name. According to our presentation 
of truth values, Valg(t) is either or {0}. In the first case, we get a contradiction 
as in the case. In the second case, w = which is impossible as TC(u;) contains a 
nonbinary set x. 

Suppose that t is {s(v) : v £ r : g(v)}. Since w £ VaLg(t), there is some a £ 
Valg(r) such that ValB(^ a )((/(u)) = true and V&lB( v ^a)(s(v)) = w. Recall that 
x £ TCb(u;). But Pre(t, B) has a node labeled (s(v) } B(v \— > a)) and thus there is a 
node labeled (s(v) } B(v \— > a)) below n in Pre(LI,A). This contradicts the choice of 
n . 

Finally, suppose that t is a variable v. As LI is a program and thus has no free 
variables, v is bound in LI. Since LI does not reuse variables, v is bound exactly once, 
either by a {s(v) : v £ r : g(v)} construction or by a do-forall. Let r be the range of 
v. By Lemma 1, B must be C{y i— > a), where C is an expansion of Ai that involves 
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only variables different from v and where a £ Valc(r). So VaLg(t) = Valc(^a)( u ) = 
a £ Valc(r). Thus, x £ TC(Valc(r)). But Pre(II,A) includes a copy of Pre(r, C), 
whose top node is labeled with (r, C), below node n . This contradicts the minimality 
of n . 

□ 

Corollary 2 Let H be a PTime program (Yl } p(n) } q(n)), and let p be the run of H on 
some input structure I . The number of objects active in p is bounded by the number 
of microsteps plus the number of atoms plus two. 

Proof Except for 0,1, and atoms, everything active in p is activated in p. The 
theorem and the observation preceding it immediately give the desired bound. □ 

5.4 The Robustness of CPTime 

We have considered two definitions of PTime programs: the official definition by 
means of active elements, and the counting-microsteps definition. Even though de- 
tails of the second definition have been skipped, we have shown in the previous two 
subsections that the two definitions are equivalent in the sense that they give rise to 
the same notion of CPTime. 

There is another natural definition of PTime programs. Fix a program II, and 
call an object x relevant to a state A of II if it is active at A or there exists a dynamic 
function / such that x £ TC(Extent(/)). Calll x is relevant to a run p of II if it is 
relevant to some state of p. 

A PTime program can be defined as a pair (LT,r(ra)) where II is a program and 
r(n) is a polynomial that bounds the number of relevant objects in IPs runs. If p is 
the run of II on an initial structure /, then the run of (II, r(n)) on / is the maximal 
initial segment p of p such (1) that the number of objects relevant to p is bounded 
by r(n), and (2) all states of p are distinct. The second clause is needed to ensure 
that p is finite in the case when II loops on /. 

Theorem 3 The active-object and relevant-object definitions give the same notion of 
CPTime 

Proof First, let (LT,r(ra)) be a PTime program with respect to the relevant-object 
definition, and let p be the run of (II, r(n)) on an input structure / of size n. Clearly, 
r(n) bounds the number of active objects in IPs runs. It suffices to show that the 
length of p is bounded by a polynomial of n that is independent of /. 

Let m be the number of dynamic names in Voc(LT), and let / range over dynamic 
functions of II. A state in p is uniquely determined by the relevant sets Extent(/). 
Hence the number of different states in p is at most r(n) m . 
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Second let (II, q(n), r(n)) be a PTime program with respect to the active-object 
definition, and let p be the run of (LT,p(ra), q(n)) on an input structure / of size n. It 
suffices to show that the number of objects relevant to p is bounded by a polynomial 
of n that is independent of /. 

Let m be the number of dynamic functions in II and let j be the maximum of 
their arities. A relevant object x has one of the following two forms. First, x may be 
Extent(/) for some dynamic function /. There at most m ■ p(n) relevant objects of 
that sort. Second, x may be a &-tuple of active objects, k < j + 1, or a member of 
the transitive closure of such a tuple. Obviously, there is a polynomial bound on the 
number of such relevant objects. □ 

6 Two Fixed-Point Theorems 
6.1 Definable Set-Theoretic Functions 

The ASM programming language allows one to use much of the usual set-theoretic 
notation. Here are some examples. 

Lemma 2 Over ASM states, every first-order formula with bounded quantifiers is 
expressible by a Boolean term. 

Proof An easy induction over the given formula. In particular, (3v £ r) g{y) -<=>■ 
£ {0 : v £ r : g(v)}. □ 

Lemma 3 The function 



if y then X\ else x 2 




is definable 



Proof 



TheUniqueNu : v £ {xi, x 2 } : (y ^ A v = x\) V (y = A v = x 2 )} 



□ 



Lemma 4 Operations x U y, f]x, x — y are definable. 
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Proof 



xlJ y = \J{ x ,y} 

P|x = {v : v G U x : (Vu; G x)u G ^} 
x — y = {w : w £ x : w ^ y} 

□ 

The standard Kuratowski definition of ordered pairs is 

OP(x,y) = {{x},{x,y}}. 

Lemma 5 There are definable functions PI and P2 satisfying the following condition. 
If z = OP(x } y), then Pl(z) = x and P2(z) = y. 

Proof 

PI (2) = TheUnique(nz) 

P2(z) = (if (J z = H z then Pl(^) else TheUnique(U z - f] z)) 

□ 

We will use the following lemma. Every nonempty transitive set T is a natural 
model of the vocabulary {G, 0}; this model will be also called T . 

Lemma 6 There exists a formula Poslnteger(x) in the vocabulary {G,0} such that, 
for every transitive set T , 

T |= Poslnteger(x) <^=^> x is a positive integer. 

Proof Poslnteger(x) asserts that x is transitive and either or of the form z U {z} } 
and the same is true for each y G x. □ 

6.2 First-Order Semantics 

The sequel of a given state with respect to a given program can be described in the 
given state by means of first-order formulas [Glavan and Rosenzweig 1993]. We need 
here a related result. 
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Lemma 7 For every rule R and every dynamic function name f , there is a first- order 
formula Update R j(x } y) such that 

A |= Update R j(x } y) -<=>■ (/, x,y) £ Den(R } A) 
for all appropriate expanded states A. 

The appropriateness of A means that A is appropriate for R and its vocabulary 
contains the name / which may or may not occur in R. 

Proof Induction on R. If R is Skip or an update rule with head name different from 
/, then Update^ y is any logically false formula. If R is fit) := t , then Update^ y 
is (x = i A y = t ). If R is "if g then Ri else R 2 endif", then Update^ y is (g = 
true A Update^ y) V (g = false A Update^ y). 

If R is "do-forall u £ r, Rq(u) enddo" , then Update^ j is 

-■Clash^ A (Bit £ r)XJpd&te Ro ( u j y 
where ClasliR = V/ieT Clash^ and ClasliR^ is 

(Bit, u £ r)3z3w3w' |lJpdate fi+ ^ u j h (z, w) A Update fi+ ^ u ;j h (z, w') A w ^ u/J 
Here Length(z) = Arity(/j). □ 

6.3 Time-Explicit Programs 

Call a PTime program II time-explicit if every positive integer i is active in all runs 
of II of length > i. 

Lemma 8 Every PTime program can be simulated by a time-explicit PTime program. 
Proof Just alter the given program II to 
do- in-parallel 

n 

if not (Halt) then 

CT := CT U {CT} 
endif 
enddo 

where CT (an allusion to Current Time) is a fresh miliary dynamic function name 
(automatically initialized to 0, according to our conventions). □ 
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6.4 Fixed-Point Definability 



Fix a PTime program II = (II, p(n), q(n)) where II is time-explicit. Let / range over 
input structures for II. Define Active(J) to be the collection of active objects in the 
run of II on /. It is easy to see that Active(J) is transitive. We also denote by 
Active(J) the structure (Active(I) } £, 0, R) where R stands for all the relations of the 
input structure /. 

Theorem 4 (First Fixed-Point Theorem) Let (Ai : i <l) be the run of II on an 

input structure I . Relations 

Df(i,x,y) Ai |= f(x) = y ^ 0, 

where f range over DynamicVoc(Yl) , are uniformly FO+LFP definable in Active(I). 

The uniformity means that the defining formulas are independent of /. 

Proof Notice that if i is a positive integer then i — 1 = [ji. For clarity, we will use 
i — 1 instead of U i in the situations where i is a positive integer. 

Call a first-order formula <p simple if every atomic subformula of <p has the form 
f(x) = t where x is a tuple of variables and t is either a variable or true or false. 
It is easy to see that every first-order formula whose vocabulary consists of function 
names is logically equivalent to a simple formula. Without loss of generality, we may 
assume that the formulas Update^ j(x, y), constructed in the previous subsection, are 
simple. 

By simultaneous recursion, we define relations Dj } where / ranges over the dy- 
namic function names of II: 



Dj(i } x } y) <^=^> Poslnteger(z) A 

\{d } {i - l,x,y) A -.(3* ^ y)U f (i - l,x,zj) V U f (i - l,x,yj\ 

Here Uf(j, x } y) is the formula Update n j(x, y) where each atomic subformula h(u) = t 
is replaced with Dh(j,u,t). □ 

The First Fixed-Point Theorem remains true if the computation time of the given 
program is bounded by any other function (not necessarily a polynomial) or is not 
bounded at all. Also, we get the same definability in any transitive T that includes 
Active(J). 
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Theorem 5 (Second Fixed-Point Theorem) Restrict attention to input struc- 
tures I such that LI halts on I . Then the set Active(I) is uniformly FO+LFP definable 
in HF(BaseSet(I)) . 

Proof The desired FO+LFP formula <p(x) asserts that x is an atom, or x £ {0, 1}, 
or the following is true for some dynamic function / where k = Arity(/). 

(3i, v ,..., v k ) [D f (i, v , . . . , v k ) A (v = x V • • • V v k = x)] 

□ 



7 On the Extent of CPTime 

We show, in particular, that PTime abstract state machines are more powerful than 
the PTime relational machines of Abiteboul-Vianu. 

Theorem 6 For every PTime relational machine S ; there exists a PTime ASM pro- 
gram LI that accepts all input structures accepted by S and rejects all input structures 
rejected by S. 

Proof If S has m instructions, then the desired program II is a do-in-parallel rule 
with m components. Each component simulates one instruction of S. □ 

Let T be an input vocabulary and let Ti be the extension of T with a unary 
predicate U . If A is a structure with basic predicate U, let A be the T -reduct of 
the substructure of A with universe U . 

Theorem 7 Let j be a positive integer and let K be the class of finite Ti-structures 
A where \A \\ < \A\ 3 . For every PTime class K of T -structures, there exists an 
ASM program LI with input vocabulary Ti that accepts all K -structures A with A in 
K and rejects all K -structures A with A outside of K . 

Proof Suppose that A £ K and let n = \A \. There exists a Turing machine T 
that, given an ordered version of A , computes F(A\U). The desired ASM program 
LI constructs all n\ orderings of A in parallel and then runs in parallel n\ simulations 
ofT. □ 

In particular, we have the case when T is empty, j ' = 1 and K is the class of 
naked sets of even cardinality. 
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Lemma 9 Let K be the class of all {U} structures A with \A \\ < \A\. There exists 
no relational machine that accepts all K -structures A with |A | even and rejects all 
K -structures A with |A | odd. 

Proof Relational machines recognize only classes definable in FO+LFP [Abiteboul 
and Vianu 1991]. It is easy to see that K admits quantifier elimination and that every 
FO+LFP formula is equivalent to a quantifier-free first-order formula. It follows that 
parity is not FO+LFP definable. □ 

Thus PTime abstract state machines are more powerful than PTime relational 
machines. 

Remark. In the case when T is empty, j ' = 1 and K is the class of naked 
structures of even cardinality, the theorem above can be strengthened by replacing 
the restriction |A |! < \A\ 3 with more liberal restriction 2'^°' < \A\ 3 . The idea is to 
compute the set of pairs of 2-element subsets of U, then extend it with the set of all 
4-element subsets of U, then extend the result with the set of all 6-element subsets 
of U, and so on. When this computation converges, check if the result contains U . 

Remark. Theorem 7 and its proof can be extended to cover the situation where 
U is not merely a subset of the input structure but rather a set that can be produced 
in polynomial time by an ASM. For example, if the intput structures are graphs G 
then U might be the commutator subgroup G' of the quotient G/G 1 . 

8 The Support Theorem 

The goal of this and the next sections is to show that the parity of a naked set is not 
CPTime computable. Thus the inclusion of CPTime in PTime (see Theorem 1) is 
proper; "choiceless" is a real restriction. The present section is devoted to establishing 
a limitation on the sets that can be activated by a CPTime computation over a naked 
set. This limitation is used in the next section to prove the negative result about 
parity. The same method will also yield other negative results. 

Consider a PTime program LI and let / be an input structure for LI. The recipe 
0(x) = {0(y) '■ y G x} extends any automorphism 6 of / to an automorphism of the 
whole initial state State(J) generated by /. It is easy to see that every automorphism 
of State(J) can be obtained this way. Indeed, an automorphism 6' of State(J) coin- 
cides, on /, with some automorphism 6 of /; by induction on Rank(x), check that 
0'(x) = 9{x) for all x G State(J). 

Definition 3 A set X of atoms of / is a support of an object y G State(J) if every 
automorphism of / that pointwise fixes X fixes y as well. □ 
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Let Active(J) be the set of active objects in the run of II on /. It is easy to see that 
Active(J) is transitive and closed under automorphisms of State(J). Let Active" 1 " (/) 
be the substructure of State(J) with base set Active(J). 

Theorem 8 (Support Theorem) Assume that the input vocabulary of H is empty. 

There exists a number k such that, for all sufficiently large I , every object in Active(I) 
has a support of cardinality < k. 

To avoid interruption of the natural flow of the proof, we start with a known 
(except we do not know a proper reference) combinatorial lemma which will be used 
later in the proof. Recall that a A-system is a collection K of sets such that X D Y 
is the same set for all X ^ Y in K. 

Lemma 10 Any family F of > l\p l+1 sets, each of size < I, includes a A-system of 
p sets. 

Proof Induction on /. If / = 0, then F itself is a A-system. Assume that / > and 
the results holds for I — 1. 

Case 1: There exists a point x that belongs to > (/ — l)\p l sets in F, say sets Xi, 
i £ J. Apply the induction hypothesis to the family {Xi — {x} : i £ /}, to extract 
a A-system of p sets {Xi — {x} : i £ J}. The family {Xi : i £ J} is the desired 
A-system. 

Case 2: Each point belongs to < (l — l)\p l sets in F. In this case, we find p pairwise 
disjoint members of F; they form the desired A-system. Notice that each member of 
F intersects < /(/ — l)lp l = lip 1 other members and that Card(F)/(/!p') > p. Pick 
a member X\ arbitrarily, and then eliminate those members that meet X\. Pick 
a member X 2 among the remaining members arbitrarily, and then eliminate those 
members that meet X 2 . And so on. □ 

Let / be a naked set and let A = Active(J). 

Lemma 11 If X\ } X 2 support y and X\ U X 2 ^ I, then X\ D X 2 supports y as well. 

Proof Suppose that X\ } X 2 support y. Fix an atom a £ / — (Xi U X 2 ). Let b 
range over / — (Xi D X 2 ) and ttj, be the transposition of atoms that takes a to b. 
For each 6, either b (ji X\ or 6 ^ X 2 . In the first case ttj, pointwise fixes X\ } and in 
the second it pointwise fixes X 2 . In either case, it fixes y. It is easy to see that the 
transpositions ttj, generate all permutations of atoms which pointwise fix X\ D X 2 . 
Hence the automorphisms induced by permutations ttj, generate all automorphisms of 
A that fix X\ H X 2 . Hence every such automorphism fixes y. □ 
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Let n = Card(J). Lemma 11 justifies the following definition. If object y has a 
support X with \X\ < n/2 } then the set 

Supp(y) = P|{^ : X supports y and \X\ < n/2}. 

is the smallest support of X. 

Since II is PTime, there exists a bound n k on Card(*4). Fix such a k and assume 

that n is so large that I | > n k . 

\k + l) 

Lemma 12 If x G A has a support of size < n/2, then \Supp(x)\ < k. 

Proof Suppose that support of size < n/2 and s = |Supp(x)|. If an au- 

tomorphism 6 moves x to some y, then it moves Supp(x) to Supp(y). If s > k } we 
have 



n k > Card(^) > Card{^(x) : 6 G Aut(A)} 
> Card{^(Supp(x)) : 9 G Aut(A)} 

□ 

In order to prove the theorem, it suffices to prove the following lemma. 

Lemma 13 If n is sufficiently large, then every member of A has a support of size 
< n/2. 

Proof Toward a contradiction, assume that the lemma fails and let x be an object 
of minimal rank without support of size < n/2. Clearly, x is a set and each member 
of support of size < n/2. Let m = |_re/(4A;)J. 

Claim 1 There exists a sequence ((6j,yj, Zj,Yj, Zj) : 1 < j < m) such that every 
initial segment ((^,y 4 -, Zi } Y{ } Zi) : 1 < i < j) satisfies the following conditions: 

• 6j is an automorphism of A, and yj,Zj are objects in A, and Yj = Supply j), 
Zj = Supp(zj). 

• yj G x, z rj (/ x. 

• Oj fixes Yi U Zi pointwise for all i < j , and 6j(yj) = Zj, and Q rj maps Yj onto Z rj . 
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Proof of the claim. We construct the tuples by induction on j. Suppose that a 
sequence ((#;, y 4 -, Z{ } Y{ } Zi) : 1 < i < j), satisfying all the conditions, has been con- 
structed. By the minimality of x, each y 4 - has a support of size < n/2. Since Z{ is an 
automorphic image of y 4 -, the same applies to Z{. By the previous lemma, \ Z{\ < k. 

Let Xj = U<j(K' U Zi). We have \X 3 \ < (j - 1) • 2k < (n/ik) ■ 2k = n/2. If 
every automorhism 6 that pointwise fixes Ui<j(^' U ^i) fixes x as well, then x has 
a support of size < n/2 and we have the desired contradiction. Suppose that there 
exists an automorphism 6 that pointwise fixes Xj but moves x. It follows that there 
exists y £ x such that the element z = #(y) does not belong to x. (Otherwise 
6(x) = 6{y : y £ x} = {0(y) '■ y £ x} = x.) Since 6(y) = z, 6 maps Supp(y) onto 
Supp(z). Choose, Oj = 6,yj = y and Zj = z. □ 

Let p be the largest integer with (2k)\p 2k+1 < m. As n grows, both m and p grow 
(but k is fixed). For large enough n, we have 

2"" 1 > [((2A;)!(p+ l) 2fc+1 -4A;) fc ] > [((m + 1) • ik) k ] > n k 
Assume that n is sufficiently large, so that 2 P ~ 1 > n k . 

Claim 2 There exists a sequence ((#j,yj, Zj,Yj, Zj) : I < j < p) such that 

• every initial segment ((#;, y 4 -, YJ, Zi) : 1 < z < j) of the given sequence satisfies 
the three conditions of Claim 1, and 

• The sets Y{ U Z 4 - form a A-system. 

Proof of the claim. Let ((#j,yj, Zj,Yj, Zj) : 1 < j < m) be as in Claim 1. By the 
induction hypothesis, eachy Y{ is of cardinality < k. Since Z 4 - is an automorphic image 
of Yi, the same applies to Z 4 -. Thus Y{ U Z 4 - < 2k. Now apply Lemma 10. □ 

Fix a sequence ((#j,yj, Zj,Yj, Zj) : 1 < j < p) as in Claim 2, and let X = 
(Yi U fl (lj U Zj) for all z ^ j in [1, . . . ,p]. Let £7 be the integer interval [2..p\. If 
z £ U, then pointwise fixes Yi U Zi and therefore pointwise fixes X . 

Claim 3 For each V C U , there exists an automorphism By such that 

• if i £ V , then Z{ = 6y(zi). 

• if i £ U — V , then Z{ = 6y(yi). 
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Proof of the claim. Construct a permutation 7r(a) of atoms as follows. If a £ X 
then 7r(a) = a. If a £ Y{ U Z 4 - for some z £ V, then 7r(a) = a. If a £ Y{ for some 
z £ U — V but a (ji X 0} then 7r(a) = #;(a), so that 7r maps Y{ onto We do not care 
how 7r behaves on the remaining atoms. The desired By is the automorphism induced 
by 7r. □ 

Let the automorphisms By be as in Claim 12. 

Claim 4 IfV,W are different subsets of U , then By(x) ^ Bw(x). 

Proof of the claim. Suppose that V and W are distinct. Without loss of generality, 
V - W ^ 0. Pick some i £ V - W. We show that z t £ B w (x) - B v (x). 

Since Zi (ji x } By(zi) (ji By(x). Since i £ V, Z{ = By(zi) £ By(x). 

Since yi £ x, Bw{yi) £ Bw{x). Since i £ [/ — W, Zi = Bw{yi) £ Bw{x). □ 

By Claim 3, there are 2 P ~ 1 different automorphic images of x. Recall that n is 
sufficiently large, so that 2 P_1 > n k . Hence Card(yl) > 2 P_1 > n k > Card(yl). This 
gives the desired contradiction. The Support Theorem is proved. □ 

Define a colored set to be an input structure with only unary relations, called 
colors, which partition the base set, so that every atom (that is every element of the 
base set) belongs to exactly one color. 

Corollary 3 Assume that input structures for the PTime programU are colored sets. 
There exists a number k, depending only on H, satisfying the following condition. If 
every color in a given input structure I is sufficiently large, then every object in 
Activeu(I) has a support of cardinality < k. 

Proof The proof is similar to the proof of the theorem. We indicate the more 
important changes. In Lemma 11, require that / — (Xi U X 2 ) contains at least one 
atom of every color. 

In the definition of Supp(y), replace \X\ < n/2 with the requirement 



Accordingly, in Lemma 12 and Lemma 13, instead of supports of size < n/2, speak 
about supports satisfying (*). In the definition of m, replace n with the minimum of 
the color sizes. The rest of the proof remains valid. □ 

Finally, let us note that, over some input structures, a PTime program can activate 
sets with no bounded support, so that the minimal support size depends on the input 
structure /, not only on the PTime program. 




for all colors C 
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Example Let / be the disjoint union of (i) a vector space V over the two-element 
field and (ii) a disjoint set S of size > 2' 1/ L Let the program do the following with a 
dynamic miliary function Q. Initialize Q to {{0}} where is the zero of V . Thereafter, 
for each q £ Q and each v £ V — q } put into Q the subspace generated by q U {u}, 
except if this would make V £ Q, in which case halt and accept. On the first step, 
the program activates all one-dimensional subspaces of V; on the second, all two- 
dimensional subspaces; on the third, all three-dimensional subspaces, and so on. The 
length of the run equals the dimension of V. The number of active objects in the run 
is 

|V| + \S\ + (Subspaces of(V)| < |V| + 2\S\ < 2|/|. 

Thus a PTime version of LI accepts I. Notice that every hyperplane H of V is 
activated. But H has no support smaller than dim(V) — 1. □ 

9 The Equivalence Theorem 

Fix an input vocabulary T and let /, J denote input structures of vocabulary T . 
Recall that every automorphism of / naturally extends to an automorphism of HF(7) 
and that a subset X of BaseSet(J) supports an object y £ HF(7) if every automor- 
phism of / that pointwise fixes X also fixes y. Given a positive integer k, call an 
object y £ HF(7) k-symmetric if every z £ TC(y) has a support of size < k. This 
terminology makes sense in the case of interest to us when many permutations of / 
fix a A;-symmetric object y. Notice that every atom has a support of size one and 
thus is A;-symmetric. Let Ik denote the collection of A;-symmetric objects in HF(7) as 
well as the corresponding structure of vocabulary T U {£,0}. 

We are interested in a special case when T is impty and thus /, J are naked sets. 

Theorem 9 (Equivalence Theorem) Fix positive integers k and m. If naked sets 
I } J are sufficiently large, then structures Ik and .Ik are ^-equivalent. 

The theorem is proved in the rest of this section. We drop the subscript k and 
abbreviate "A;-symmetric" to "symmetric". Without loss of generality, m > 3. We 
assume that the naked sets /, J have size > km and construct a winning strategy for 
the Duplicator in Game m (7, J). The idea is to represent every relevant object x as 
a combination of a form and matter. The form of an object x reflects a definition 
of x independent from the underlying sets of atoms. The matter of x is an ordered 
support of x. 
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9.1 Matter 



Molecules A molecule over a naked set / is an injective map a : k — > I. In other 
words, a molecule is a sequence of k distinct atoms. 



The Configuration of a Sequence of Molecules Consider a naked set /. The 
configuration C(a) of a finite sequence a = (cr , . . . , cr;_i) of molecules over / is the 
equivalence relation on / X k given by 

(i,p)C(a-)(j,q) <7i(p) = <7j(q)- 

The configuration describes how the ranges of the molecules overlap. By the injec- 
tivity, (i } p)C(cr)(i } q) -<=>■ p = q. Notice that C(a) is uniquely determined by the 
configurations C(cr 8 ,cr J ). 

Abstract Configurations Let I be a natural number. An l-ary configuration is 
an equivalence relation E on / X k such that (i,p)E(i,q) -<=>■ p = q. Every 
C(cr , . . . , cr;_i) is an /-ary configuration, and every /-ary configuration can be realized 
in this way. To prove the latter, assign a different atom [i } p] to every equivalence 
class (i,p)e of E. Then construct (Ji(p) = [i,p\- 

Lemma 14 Suppose that 

I G m, and <r , . . . , o\ are molecules over I , and ti, . . . , 77 are molecules over J ; 

Q = C(a , . . . ,ai) and Q' = C(ai, . . . , 07) = C(ti, . . . , 77) . 
There exists a molecule r over J with C(r , . . . ,77) = Q . 



Proof Define the desired r by setting 



(n(gi) if (0, P )Q(l,qi) 

r' Q (p) = \ T2 ^ if (MQ(2,g 2 ) 
U(*) if (0,p)Q(l,qi) 

and then extending Tq to a full molecule r by using distinct values in J - 
U'=i R an g e ( r i)- ^ 18 obvious that C(r , . . . , 77) = Q provided that r is well-defined. 
Recall that Card(J) > km and thus there exist enough distinct values to extend Tq 
to r . In the rest of the proof, we check that Tq is well-defined. 

First, we check that each Tq(p) is defined uniquely. Let I < i,j < I and suppose 
(0,p)Q(i,q) and (0,p)Q(j,s). Then (i,q)Q(j,s), (i, q)Q'(j, s), and therefore T t (q) = 

T A s )- 
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Second, we check that Tq is injective. Let 1 < i,j < I and suppose that Tq(p) = 
Tq(p') where Tq(p) = r 8 (g) and Tq(p') = Tj(s). By the definition of Tq, we have 
(0,p)Q(i,q) and (0, p')Q(j, s). Further, r 8 (g) = Tq(p) = Tq(p') = Tj(s), and hence 
(i } q)Q'(j, s) and therefore (i,q)Q(j,s). Putting this together, we have 

(0,p) Q (i,q) Q (j,s) Q (0,p') 

which implies p = p' . □ 

9.2 Forms 

The Definition of Forms Fix a list c , ci, . . . , c^-i of new symbols. The set of 
forms is the smallest set containing the symbols c p and containing every finite set 
of pairs E) where <p is a form and E is a binary configuration. If <p = c p then 
Rank((,c) = 0; otherwise 

Rank((,c) = 1 + max{Rank(?/>) : some (?/>, E) G f}. 

Denotations A form <p and a molecule a over a naked set / uniquely define an 
object (f */ a G HF(7). The subscript may be omitted in */ if the naked set is clear 
from the context. The definition is given by induction on <p. 

• C p * (T = (j(p). 

• If (f is a set, then <p * a = {tp * r : (?/>, C(r, cr)) G <£>}. 

Permutations Any permutation 7r of / extends to an automorphism, also called 7r, 
of the structure (HF(7), G) by means of the following rule: ir(x) = {^(y) : y G x}. 
It is easy to see that every automorphism of HF(7) is obtained this way. 

Lemma 15 If it is a permutation of I , then ir((p * cr) = <p * ira. 

Proof by induction on <p. ir(c p * cr) = ircr(p) = (ircr)(p) = c p * (7r<r). If <p is a set, then 

ir((p * cr) = 7r{?/> * t : (?/>, C(r, cr)) G = {^(^ * r) : (?/>, C(r, cr)) G <£>} 

= {?/> * 7rr : (?/>, C(r, cr)) G <£>} (by induction hypothesis) 

= {V>*/9 : (VsCVV,^)) ^ <£>} (p = ttt) 

= {?/>*/?:(?/>, C(/?, 7rcr)) G <£>} (see below) 

= (,C * 7TCT 
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It remains to verify that C(ir 1 p } cr) = C(p } ircr): 



(0,p)C(7r-V,<r)(l,g) 
pip) = (Kv)(q) 



^ (7T-V)(P) = 

(0,p)C(p,TT<T)(l,q) 



a(q) 



□ 



Corollary 4 Every <p */ a is symmetric and thus belongs to I . 

Proof Indeed, every (p*icr is supported by Range(cr) and thus has a support of size 
< k. The same conclusion applies to the members of <p */ a. □ 

Recall that / is a naked set of cardinality > km. 

Lemma 16 Every symmetric object x over I is equal to <p */ a for some form <p and 
some molecule a over I . 

Proof Any atom x equals c * o where a is an arbitrary molecule with cr(0) = x. 
Proceeding inductively, suppose that x is a symmetric set with elements y = ip y * r y . 
Since x is symmetric, there is a molecule a whose range supports x. We will prove 
that x = (f * a where <p = {(ip y} C(T y} o-)) : y £ x}. One inclusion is easy. Suppose 
that y £ x. By the definition of */, <p * a = {tp * r : (?/>, C(r, a)) £ <p}. By the 
definition of (f } (tp y * C(r y} a)) £ <p. Hence y = ip y *T y £(p*o-. 

For the difficult direction, consider any z £ <p * a. By the definition of */, z is 
a composition ip * p such that (ip,C(p,a)) £ <p. By the definition of (f } there exists 
a y such that ip = ip y and C(p } cr) = C(T y} cr). The latter equality does not imply 
that p = T y and we are not going to prove that z = y. Instead we construct an 
automorphism ir of / that pointwise fixes a and moves y to z. Since a supports x, ir 
fixes x; hence z £ x. It remains to construct such ir. 

We want that ttt v = p and that ir pointwise fixes Range(cr). To this end, define a 
function ir : Range^) U Range(cr) — y I by 



Even though the two cases are not mutually exclusive, ir is well-defined. Indeed, 




T y(p) 



o-(q) (0,p)C(T y ,<r)(l,q) (0,p)C(p,<T)(l,q) p(p) 



o-(q). 
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Furthermore, ir is injective. Indeed, assume that 7r (a) = 7r (&). If 7r (a) = 
p(pi) } ir (b) = p(p2) then pi = p 2 (because p is injective) and therefore a = r y (pi) = 
T y(P2) = b. In case a = a(qi),b = c(g 2 ), we have a = 7r (a) = 7r (&) = b. Finally 
suppose that a = r y (p) } b = cr(q). Then 

TT (a) = TT (b) => p(p) = a{q) (0,p)C(p,(r)(l,q) 
(0,p)C(T y ,(T)(l,q) => T y (p) = cr(q) a = b 

Thus, function ir is one-to-one. Extend it to a permutation ir over / in an 
arbitrary way. Since ir extends 7r , it pointwise fixes Range(cr) and ttt v = p. In the 
standard way, ir extends to an automorphism of / which will be denoted ir as well. 
Since a supports x (by the choice of <r), ir(x) = x. By Lemma 15, 

ir(y) = Tr(ip y * T y ) = ip y * (iTT y ) = ip y * p = z. 

□ 

9.3 The In and Eq Relations 

Lemma 17 There are ternary relations Eq and In such that, in every I , 

ip * t G f * (T -<=>■ In(ip,<p,C(T,a)) (1) 
ip * r = (p * a -<=>• Eq(ip,<p,C(T,a)) (2) 

for all forms <p, ip and all molecules a, r . 

The crucial points here are that a and r are involved in In and Eq only via their 
configurations and that In and Eq don't depend on /. 

Proof We define In(?/>, (f } E) and Eq(?/>, (f } E) by recursion on Rank(?/>) + Rank((,c). 

In(?/>, E) -<=>■ (f is a set and (3 form \) 

(3 ternary configuration Q with Q12 = E) 
[(x,Qo2) £ f) and Eq(?/>, X, Qw)} 

Eq(tp,(p,E) <==> either (Bp, q G k) \ip = c p A <p = c q A (0,p)E(l, g)] , 

or ip are sets and (V form \) 
(V ternary configuration Q with Q12 = E) 
[if (x, Q02) £ then In(x, ^, <3oi), and 
if (x, Q01) G ^ then In(x, Q02)] 
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Proof of (1). If (f is a symbol c p , then <p * a is an atom, so the left side of (1) is 
false. So is the right side, by the definition of In. Thus, we may assume from now on 
that (f is a set. 

Suppose first that ip * r £ <p * cr. By the definition of */, ip * r = % * p for some x, p 
with (x,C(/9,cr)) £ By the induction hypothesis, Eq(?/>, x, C(r, /?)). We check that 
this % and the ternary configuration Q = C(p, r, cr) witness In(?/>, C(r, cr)). Indeed, 
Q12 = C(t,(t), {x,Qo2) = (x,C(p,o-)) £ ip, and Eq(?/>, X, Qio) is Eq(^>, X, p)). 

Conversely, suppose that ln(ip, C(r, cr)) is witnessed by x and Q. By Lemma 14, 
there exists p such that Q = C(p,T,cr). We have: 

(X, C (P, <t)) = (x, Q02) G <^>, so that x * P £ <£> * cr; and 
Eq(?/>, x, Qw) holds, that is Eq(?/>, x, C(t, p)) holds. 

By the induction hypothesis, ip*T = x*p£ ( p* cr - Part (1) is proved. 

Proof of (2). Both sides of (2) are false if one of ip,ip is a symbol c p while the 
other is a set. If <p = c q , ip = c p , then 



So we may assume from now on that both ip and <p are sets. 

Suppose first that ip * r = <p * cr. Let x t* e any form and Q be any ternary 
configuration with Q12 = C(r,cr). We must prove 



By symmetry, it suffices to prove only the first of these two implications. So 
assume (x, Q02) £ f- By Lemma 14, there exists p such that C(p,T,cr) = Q. Then 
(x, C(p, cr)) = (x, Q02) £(p } sox*p£ ( p* cr = 4 , * T - By the induction hypothesis, 
In(x, ip, C(p, t)), that is In(x, ip, Q01), as required. 

Conversely, suppose that Eq(?/>, (f, C(t, cr)) holds. By symmetry, it suffices to prove 
only that ip * r C (p * cr. Let X * /°? with (x, C(/?, t)) £ ^, be an arbitrary element of 
ip * r. Apply the definition of Eq(?/>, C (r, cr)) with this x and with Q = C(p, r, cr), 
which satisfies Q i2 = C(r,a). Since Q i = (x,C(p,t)) £ ip, we have In(x, Q02), 
that is In(x, C(p, cr)). By the induction hypothesis, x*P^ ( f* cr , as required. □ 




(x,<3o2)<E^ ln(x,ip,Qoi) 

(x,Qoi)e<p => in(x,ip,Qo2) 
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9.4 The Winning Strategy 



Now we are ready to construct a winning strategy for the Duplicator in the 
Game m (7, J). The strategy is to ensure that, after every step, there exist forms 
(fi } /-molecules Oi and J-molecules r 4 -, i £ m, such that 

Xi = (fi * a,, yi = (fi * Ti, C(a) = C(f) (*) 

where Xi,yi are elements covered by pebbles i in /, J respectively. (Without loss of 
generality, we assume that, in the beginning, all 2m pebbles are on the board with 
all Xi = y t = 0.) 

First we check that Duplicator can always play in the required manner. Clearly 
(*) holds in the initial position, as we can take all <fi = 0, all Oi = o 3 and all 
T{ = Tj. Now suppose that, after some number of steps, (*) holds witnessed by 
(p, <7, f, and then Spoiler moves. By symmetry, we may assume that Spoiler moves 
pebble on / from x to x' . By Lemma 16, x' = (f' */ <t for some form (f' and 
some molecule a' over /. By Lemma 14, there exists a molecule Tq over J such that 
C(<Tq, <ti, . . . , cr m _i) = C(tq, ri, . . . , r m _i). Duplicator can move pebble on J from 
Ho to y' = (f' *j Tq and (*) will be restored. 

Second, we check that (*) ensures that the map X{ i— > yi is a partial isomorphism 
and thus the proposed strategy of Duplicator is winning. For each i,j £ m, (*) 
implies C(cr 8 ,cr J ) = C(r 8 ,Tj). By Lemma 17, 



Xi £ Xj <=> tfi * a t £ (fj * (Tj ^==> ln((fi, cpj, C(a t , (Tj)) 

In((^i, (fj,C(Ti, Tj)) (fi * Ti £ (fj * Tj 

and similarly with = and Eq in place of £ and In. 
The Equivalence Theorem is proved. □ 



9.5 A Generalization 

Until now we have considered the case when the input vocabulary T is empty. Now 
we consider the case when T consists of unary predicates, say P 0} . . . , P c -i- Restrict 
attention to input structures where the c basic relations are pairwise disjoint; recall 
that such input structures are called colored set with colors P 0} . . . , P c -i- An auto- 
morphism of a colored set / is simply a color preserving permutation of the elements 
of /. Recall that Ik is the collection of A;-symmetric elements of HF(7) as well as the 
corresponding structure of vocabulary {P , • • • , Pc-i, £ 5 0}- We shall indicate how to 
modify the proof of the Equivalence Theorem to obtain the following version of it for 
colored sets. 
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Corollary 5 Fix positive integers c } k } m. If I and J are colored sets, in each of which 
all the colors P 0} . . . , P c -i sufficiently large, then Ik and .Ik are ^-equivalent. 

Proof To prove this, we need only to make the following changes in the proof of the 
Equivalence Theorem for naked sets. 

First, a configration should specify not only how the ranges of molecules overlap 
but also the colors of the atoms in the molecules. Thus, the configuration C{a) 
of a finite sequence a = (cr , . . . , 07_i) of molecules should be defined as a pair 
(C = (<t), C*(<t)) where C=(a) is the equivalence relation on / X k that we previously 
called the configuration and where C*(<r) is the function I X k — y c sending each pair 
(i,p) to the unique r with 07(79) G P r . An abstract /-ary configuration is a pair E 
whose first component E = is what we previously called an abstract /-ary configuration 
and whose second component E* is a function from I X k into c that is constant on 
every equivalence class of E = . 

Next, we check that Lemma 14 still holds with this new notion of configuration. 
Two things must be added to the earlier proof of the lemma: Tq and <t agree as to 
colors, and Tq can be extended to r so as to maintain agreement with <t . The latter 
is clear because the colors P r in our input structures are large enough. As for the 
former, we must prove that, if i > 1 and (0,p)Q=(i,q) then r 8 (g) has the same color 
as cr (p). But from (0,p)Q=(i, q) we get cr (p) = cr 8 (g), and this element has the same 
color as r 8 (g) because C (oi, . . . , 07)* = C(ti, . . . , 77)*. 

In the statement of Lemma 15, "permutation" must be changed to "automor- 
phism". The proof of that lemma is unchanged except that the computation veri- 
fying that C(7T _1 /9,cr) = C(/9,7Tcr) now verifies only that the C= components of the 
configurations agree. To get agreement of the C* components, we use the fact that rr 
is an automorphism and thus preserves colors. 

The only other change in the earlier proof occurs in Lemma 16, where the difficult 
direction involved constructing a certain permutation rr. In the colored situation, we 
must make sure that rr is an automorphism. For this purpose, we first verify that 
the 7T defined in the earlier proof preserves colors. For atoms a with 7r (a) = a, this 
is trivial, so we consider an atom a for which a = T y (p) and 7r (a) = p(p). Because 
C(T y} cr) = C(p,si), in particular the C* components agree. So T y (a) has the same 
color as p(p). But these atoms are a and 7r (a), so ir preserves the color of a. Finally, 
when extending the map ir to an automorphism rr, we must choose the extension so 
as to preserve colors, but this is trivially possible. □ 
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10 Negative Results 



10.1 Parity 

Recall that a naked set is an input structure of the empty vocabulary. 

Theorem 10 (Parity Theorem) Parity is not in CPTime. Moreover, suppose that 
K\ } K 2 are disjoint infinite classes of naked structures, each containing structures of 
infinitely many cardinalities; then (Ki 7 K 2 ) is not CPTime. 

Proof Let II be any PTime ASM program with empty input vocabulary. We show 
that there are F £ K\ and I 2 £ K 2 such that II does not distinguish between F and 
I 2 . By the Support Theorem in Section 8, there is a positive integer k such that, in 
every run of LT, every active set has a support of size < k. 

Let Active(J) be as in Section 6. By the First Fixed-Point Theorem in Section 6, 
there exists an FO+LFP sentence <p that asserts that LI accepts /. (The sentence <p 
asserts that there exist i such that Df(i, true) holds in Active(J) where / is Output.) 
By Proposition 2 in Section 2, there is m such that <p is expressible in L^ w . By the 
Equivalence Theorem in Section 9, <p does not distinguish between any sufficiently 
large input structures I\ } I 2 . □ 

10.2 Bipartite Matching is not in Choiceless PTime 

Bipartite Matching is the following decision problem. 

Instance: A bipartite undirected graph G = ( V, E) with the two parts (of boys 
and girls respectively) of the same size. 

Question: Does there exists a perfect matching for G1 

Recall that a perfect matching is a set F of edges such that every vertex is incident 
to exactly one edge in F. A partial matching is an edge set F such that every vertex 
is incident to at most one edge in F. The standard perfect-matching algorithm starts 
with the empty partial matching F and then enlarges F in a number of iterations. 
During each iteration, one constructs an auxiliary set D of directed edges, then seeks 
a D-path P from an unmatched boy to an unmatched girl, and then modifies F by 
means of P. 

We use variables 6, g to vary over boys and girls respectively. If X is a set of edges, 

let 

Boys-to-girls(X) = {(&, g) : {b, g} £ X} 
Girls-to-boys(X) = {(g, b) : {6, g} £ X} 
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And if X is a set of ordered pairs of the form (b,g) or (g, 6), let 

Unordered(X) = {{b,g} : (b,g) G X V (g,b) G X}. 

In Table 10.2, we give a self-explanatory program in the ASM language with the 
the choice construct for the perfect matching algorithm. It is customary to omit 
the keywords do-in-parallel/enddo. For readability, we take some little additional 
liberties with the ASM syntax. 

The relation REACHABLE and the function PATH in the last transition rule are 
external. In other words, we take for granted algorithms that, given a boy 6, a girl g 
and set D of directed edges over V, check whether there exists a D-path from b to g 
and if yes then construct such a path. For simplicity, we identify a path with the set 
of its edges. 

For the benefit of those unfamiliar with the algorithm, let us explain one iteration 
of the algorithm in the case when the given bipartite graph has a perfect matching 
M. Suppose that F is a current partial matching involving k boys, and there are 
some F-unmatched boys. Abusing notation, let M(g) be the girl M-matched to b 
and let F(g) be the boy F-matched to g. Let D be as in the Build-Digraph rule. For 
any F-ummatched boy b 0} there exists a D-path P from b to some F-unmatched 
girl. Indeed, construct 

gi = M(b )M = F( gi ) 
g 2 = M{b x )M = F{g 2 ) 

g k = M(6 fc _i),6 fc = F(g k ) 
g k+1 = M(b k ) 

until you encounter an F-unmatched girl g k +i- It is easy to see that, if X = 
Unordered(P), then (F — X) U (X — F) is a partial matching involving k + 1 boys. 

Theorem 11 (Bipartite Matching Theorem) 

Bipartite Matching is not in CPTime. 

Proof Given an even integer n = 2p > 2, we construct two bipartite graphs Go and 
G\ on a set 

K = {b , ■ ■ • A-i} u {#o, • • - ,g n -i} 

of n boys and n girls. In Go, (1) the first p boys and the first p girls form a complete 
bipartite graph, (2) the last p boys and the last p girls form a complete bipartite 
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if Mode = Initial then 

F := 0, Mode := Examine 
endif 

if Mode = Examine then 

if there is an unmatched boy then 
Mode := Build-Digraph 

else Output := true, Mode := Final 
endif 

if Mode = Build-Digraph then 

D := Girls-to-boys(F) U Boys-to-girls (E-F) 

Mode := Build-Path 
endif 

if Mode = Build-Path then 
choose an unmatched boy b 

if (3 unmatched girl g) REACHABLE/) (b , g) then 

choose an unmatched girl g with REACHABLE (D,b,g) 

P := PATHp (b ,g) , Mode := Modif y-Matching 
endchoose 
else Output := false, Mode := Final 
endchoose 
endif 

if Mode = Modify-Matching then 

F := (F - Unordered(P)) U (Unordered(P) - F) 

Mode := Examine 
endif 

Table 1: The perfect matching algorithm 
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graph, and (3) there are no other edges. Clearly, Go has a perfect matching. In G\ } 
(1) the first p + 1 boys and the first p girls form a complete bipartite graph, (2) the 
last p — 1 boys and the last p girls form a complete bipartite graph, and (3) there are 
no other edges. Clearly, G\ has no perfect matching. 

Notice that the two graphs are essentially 4-colored sets; "adjacency" is definable 
from the colors. The rest of the proof is similar to the proof of the Parity Theo- 
rem, except that, instead of the Support Theorem and Equivalence Theorem, we use 
Corollary 3 and Corollary 5 respectively. □ 

11 Revised Choiceless PTime 

Enrich the computation model with a static miliary function InputSize. In the defini- 
tion of initial states with n atoms require that InputSize is the von Neumann ordinal 
for n. That changes the notion of CPTime; indeed, there is an obvious PTime ASM 
program with InputSize that accepts all naked sets of odd cardinality and rejects all 
naked sets of even cardinality. Let us call the new complexity class CPTime" 1 ". 

CPTime" 1 " is still defined in terms of pairs (K\ } K2) of classes of finite structures 
of the same vocabulary which are disjoint but not necessarily complementary. But 
the presence of Input Sice allows us to augment each program with a polynomial clock 
and thus ensure that every input is either accepted or rejected within polynomial 
time. Thus we can return to the usual framework where a complexity class is defined 
in terms of classes of structures (rather than pairs of classes). 

Theorem 12 There is a class of "standard" ASM programs with InputSize and the 
following properties: 

1. Each standard program accepts or rejects every input within polynomial time. 

2. Every PTime program can be simulated by a standard program. 

3. There exists a PTime Turing machine that, given an ASM program, decides 
wether the program is or is not standard. 

Proof A standard program is an arbitrary program II augmented with a clock that 
bounds the number of microsteps in the computation of II by some polynomial p of 
the InputSize. The clock is initialized to zero, is incremented at each microstep of II, 
and stops the computation when it reaches p(InputSize). To satisfy the third claim, 
use a standard format for the clock program. □ 

Fix a particular class of standard programs and redefine CPTime" 1 " as follows: 
A class K of finite structures of the same vocabulary is CPTime" 1 " if there exists a 
standard program that accepts exactly the structures in K. 
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Corollary 6 There is a PTime (two-valued) logic that expresses exactly CPTime + 
properties. 

Proof View standard programs as formulas. □ 
In the rest of this section, we show that: 

• for input structures with just one unary relation U, the parity of \U\ cannot be 
computed in CPTime + , and 

• Bipartite Matching is outside CPTime + . 

For this purpose, we first observe that Corollary 3, the Support Theorem for col- 
ored structures, remains true when InputSize is allowed, as a static miliary function, 
in programs. Indeed since the value of InputSize is a von Neumann ordinal, it in- 
volves no atoms and is therefore fixed by all permutations of the atoms. It follows 
that, when any program II is run with a colored set / as the input structure, the set A 
of active elements is invariant under all automorphisms of /. With this observation, 
the proof of the Support Theorem for colored structures goes through as before. 

Recall from Section 9 that, for any colored set / and any positive integer k, 
Ik denotes the set of ^-symmetric elements of HF(7) as well as the corresponding 
structure with £, 0, and the colors. For our present purposes, we must consider 
the expansion |/|) of the structure Ik where the cardinality |/| of the input set 
is named by the miliary symbol InputSize. We show next that the only effect of 
this extra constant on the equivalence theorem is to restrict the result (as one might 
expect) to input structures of equal cardinality. 

Theorem 13 Fix positive integers c, k, and m. If I and J are c-colored sets of the 
same cardinality, and if all the colors P , . . . , P c -i are sufficiently large in both of 
them, then |/|) and (Jk } \J\) are ^-equivalent. 

Proof Observe first that, for each natural number n, there is a form (f n such that 
(f n * a = n for every molecule a. Such (f n can be defined inductively by 

(f n = {(<£V, E) | r < n and E is a binary configuration}. 

The verification that (f n * a = n is a trivial induction on n. 

Now suppose / and J are as in the hypothesis of the theorem. The m-pebble game 
for the structures |/|) and (J^, |J|) is the same as the (m + l)-pebble game for 
Ik and .Ik with one pebble located permanently at the natural number |/| = |J| = n 
in both structures. Since this number is the denotation of the same form (f n in both 
structures, Duplicator can still use the winning strategy described in Section 9: match 
the forms and the configurations of molecules. □ 
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Let Subset Parity be the following decision problem. 

Instance: A structure (/, U) where U is a unary relation on / (i.e., U C /). 
Question: Is \U\ odd? 

Corollary 7 Subset Parity is not in CPTime + . 

Proof If Subset Parity were in CPTime + , then, by Proposition 2, Theorem 4, and 
Corollary 3, there would be positive integers m and k such that, whenever (I,U) is 
a positive instance and (J, V) a negative instance of Subset Parity, then Duplicator 
has no winning strategy in the m-pebble game for |/|) and (J^, |J|) (where / 
abbreviates (I,U) and similarly for J). 

On the other hand, structures of the form (/, U) can be regarded as 2-colored 
sets, with colors U and I — U . Thus, by Theorem ??, Duplicator has a winning 
strategy provided |/| = |J| and all of |/7|, \I — U\, and \ J — V\ are large enough. 
This situation is clearly compatible with \U\ being odd and |V| even, so we have a 
contradiction. □ 

Corollary 8 Bipartite Matching is not in CPTime + . 

Proof We can use exactly the same proof as in Section 10, because the two structures 
used there had the same cardinality. □ 
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